fix(clean-env): point the vendored skill at a script that exists

[rubenvdlinde]

This repo carries a copy of hydra's clean-env skill, and the copy told you to run bash .claude/scripts/clean-env.sh — a file that does not exist here, in hydra, or in any other checkout. Its app list was five names long against a fleet of twenty-one, and three of those five are app directories or retired apps rather than app ids, so following it by hand enables nothing.

Synced from hydra's canonical version (ConductionNL/hydra fix/clean-env-skill-points-at-a-real-script). It now drives .github/dev-up.sh, and its verification section names what to actually check: an app enables successfully with no vendor/autoload.php and then fatals on every request, and enables successfully with a pre-rename JS bundle and then renders a blank page. Both were true of live apps in the workspace on 2026-08-27, and "confirm apps are listed and enabled" sees neither.

Docs only — no code paths touched.

🤖 Generated with Claude Code

[github-actions]

Quality Report — ConductionNL/shillinq @ e757266

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
check-manifest-shell		✅
format		✅
check-l10n-js		✅
check-schema-l10n		✅
check-manifest-budget		✅
check-markers		✅
check-registers		✅
check-seeds		✅
check-fragment-required		✅
check-nav-reachability		✅
check-job-registration		✅
test-l10n		✅
composer			✅	✅ 106/106
npm			✅	✅ 551/551
app:check-code	⏭️
info.xml	✅
REUSE	❌
PHPUnit					✅
Newman					✅
Playwright					✅
Hydra gates					❌

---

Quality workflow — 2026-08-27 10:28 UTC

Download the full PDF report from the workflow artifacts.

[github-actions]

Quality Report — ConductionNL/shillinq @ 5aca293

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
check-manifest-shell		✅
format		✅
check-l10n-js		✅
check-schema-l10n		✅
check-manifest-budget		✅
check-markers		✅
check-registers		✅
check-seeds		✅
check-fragment-required		✅
check-nav-reachability		✅
check-job-registration		✅
test-l10n		✅
composer			✅	✅ 106/106
npm			✅	✅ 551/551
app:check-code	⏭️
info.xml	✅
REUSE	❌
PHPUnit					❌
Newman					❌
Playwright					❌
Hydra gates					❌

---

Quality workflow — 2026-08-27 11:52 UTC

Download the full PDF report from the workflow artifacts.

[github-actions]

Quality Report — ConductionNL/shillinq @ 3f6b494

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
check-manifest-shell		✅
format		✅
check-l10n-js		✅
check-schema-l10n		✅
check-manifest-budget		✅
check-markers		✅
check-registers		✅
check-seeds		✅
check-fragment-required		✅
check-nav-reachability		✅
check-job-registration		✅
test-l10n		✅
composer			✅	✅ 106/106
npm			✅	✅ 551/551
app:check-code	⏭️
info.xml	✅
REUSE	❌
PHPUnit					✅
Newman					✅
Playwright					✅
Hydra gates					✅

---

Quality workflow — 2026-08-27 13:27 UTC

Download the full PDF report from the workflow artifacts.

[github-actions]

Quality Report — ConductionNL/shillinq @ b170094

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
check-manifest-shell		✅
format		✅
check-l10n-js		✅
check-schema-l10n		✅
check-manifest-budget		✅
check-markers		✅
check-registers		✅
check-seeds		✅
check-fragment-required		✅
check-nav-reachability		✅
check-job-registration		✅
test-l10n		✅
composer			✅	✅ 106/106
npm			✅	✅ 551/551
app:check-code	⏭️
info.xml	✅
REUSE	❌
PHPUnit					✅
Newman					✅
Playwright					✅
Hydra gates					✅

---

Quality workflow — 2026-08-27 16:13 UTC

Download the full PDF report from the workflow artifacts.

[rubenvdlinde]

The one pending check, run locally with the canonical runner

88 CI checks are green here; only quality / Hydra Gates was still queued. Ran
it locally from ConductionNL/.github (the same source CI delegates to):

hydra-gates EXIT=0
COVERAGE: 68 of 78 declared gates reported a result (10 not applicable; 68 of 68 applicable gates ran)

The count matters as much as the exit code — a gate run that measures nothing
also exits 0. My first attempt reported 67 of 68 and two FAILs, both
environmental: ajv was not resolvable, and gate-60 skipped because
vue-material-design-icons was not installed. The gates refuse to run
fail-open, which is exactly right — "a weaker check reported as a pass is not
a pass." Re-ran with NODE_PATH set and node_modules linked; gate-60 then
reported PASS and coverage reached 68 of 68.

Non-blocking advisories, unchanged by this PR: gate-18 (4 imperative-dispatch
sites) and gate-19 (290 scenarios missing @e2e, tracked in .github#477).